(Reuters) – Target Corp said data from about 40 million credit and debit card accounts might have been stolen during the Thanksgiving weekend, in one of the largest credit card breaches at a U.S. retailer.

The company confirmed a Reuters report on Wednesday that said federal authorities were investigating a data breach, which started on the busy Black Friday weekend.

Target said the accounts, which might have been compromised between Nov. 27 and Dec. 15, affected customers making credit and debit card purchases at its U.S. stores.

(Reporting by Siddharth Cavale in Bangalore and Jim Finkle in Boston; Editing by Kirti Pandey)